KLA63685 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Network can be exploited to cause denial of service or...

CVE-2024-1060

Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-1060

Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-1060

CVE-2024-1060 is a Chrome/Chromium issue described as a use-after-free in the Canvas module that could enable remote heap corruption via a crafted HTML page prior to version 121.0.6167.139. The affected product is Google Chrome/Chromium; the root cause is a memory management bug in Canvas. The pu...

CVE-2024-1060

Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-1060

Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Google Chrome < 121.0.6167.139 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 121.0.6167.139. It is, therefore, affected by multiple vulnerabilities as referenced in the 202401stable-channel-update-for-desktop30 advisory. - Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed ...

Stable Channel Update for Desktop

The Stable channel has been updated to 121.0.6167.139 for Mac and Linux and 121.0.6167.139/140 to Windows which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

Google Chrome < 121.0.6167.139 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 121.0.6167.139. It is, therefore, affected by multiple vulnerabilities as referenced in the 202401stable-channel-update-for-desktop30 advisory. - Use after free in Network in Google Chrome prior to 121.0.6167.139 allowe...

Huawei EulerOS: Security Advisory for grub2 (EulerOS-SA-2024-1060)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-1060

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YKM YKM CRM allows Reflected XSS. This issue affects YKM CRM: before 23.03.30...

CVE-2023-1060

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YKM YKM CRM allows Reflected XSS.This issue affects YKM CRM: before 23.03.30...

CVE-2023-1060 XSS in YKM CRM

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YKM YKM CRM allows Reflected XSS. This issue affects YKM CRM: before 23.03.30...

CVE-2023-1060

CVE-2023-1060 affects YKM CRM prior to version 23.03.30. The flaw is an Improper Neutralization of Input During Web Page Generation, enabling Reflected XSS. Affected software is YKM CRM (before 23.03.30). Root cause: insufficient input sanitization during dynamic page generation. Impact is reflec...

CVE-2023-1060 XSS in YKM CRM

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in YKM YKM CRM allows Reflected XSS. This issue affects YKM CRM: before 23.03.30...

K20622530: TMM vulnerability CVE-2020-5930

Security Advisory Description Unauthenticated attackers can cause disruption of service in non-TCP traffic via poisoning of the route metrics cache. This issue is caused by an incomplete fix for CVE-2004-1060. CVE-2020-5930 Impact An attacker may be able to cause a denial of service DoS on a...

CVE-2022-45163

An information-disclosure vulnerability exists on select NXP devices when configured in Serial Download Protocol SDP mode: i.MX RT 1010, i.MX RT 1015, i.MX RT 1020, i.MX RT 1050, i.MX RT 1060, i.MX 6 Family, i.MX 7Dual/Solo, i.MX 7ULP, i.MX 8M Quad, i.MX 8M Mini, and Vybrid. In a device...

Mageia: Security Advisory (MGASA-2018-0270)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Python < 2.7.15, 3.x < 3.4.9, 3.5.x < 3.5.6, 3.6.x < 3.6.5, 3.7.x < 3.7.0.beta3 Python Issue (Issue32981) - Linux

Python is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:python:python"...

SUSE: Security Advisory (SUSE-SU-2018:2408-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...